Supported WPA3 Combinations in Order of Priority

Best Practices for Wi-Fi 6E (Tri-Band) including Voice, with Cisco WLAN Infrastructure

Supported WPA3 Combinations in Order of Priority
Protocal	Encryption	AKM	Default Config	Supported Config	Recommended for Co-located Environment
WPA3 Enterprise	GCMP 256	SuiteB-192 FT	Enabled	FT	FT
WPA3 Enterprise	AES-CCMP 128	FT 802.1X	Enabled	FT	FT
WPA3 Personal	AES-CCMP 128	SAE FT	Enabled	SAE H2E	SAE H2E
WPA3 Enterprise	GCMP 256	SuiteB-192	Enabled	PMKID	PMKID
WPA3 Enterprise	AES-CCMP 128	802.1X-SHA256	Enabled	OKC	OKC
WPA3 Personal	AES-CCMP 128	SAE	Enabled	SAE H2E	SAE H2E
Enhanced Open	AES-CCMP 128	OWE	Enabled	OWE	As default

Zebra devices support FT Over the Air and FT Over DS authentication mechanisms for both WPA3 personal and WPA3 enterprise modes. FT Over DS provides 5% faster roam times which benefits the user experience, especially for media applications such as Voice and Video. Zebra devices will automatically prioritize Over DS.

As per the current 17.9.1 IOS XE release, Cisco WLC/AP models supports Fast Transition (FT) only in WPA3 personal mode.